Industry: Energy Product: ModelRisk Application: Probabilistic N-1 / N-2 contingency analysis for an ISO control area
The NERC reliability standard is famously phrased as a deterministic guarantee: the system must remain stable after any single credible contingency (N-1) and most double-contingencies (N-2). The metric the regulator actually tracks, however, is Loss of Load Expectation (LOLE) — an inherently probabilistic quantity, capped at 0.1 days/year for most reliability councils (the "one-day-in-ten-years" standard). For a 14 GW peak summer control area pushing 92% instantaneous renewable penetration on the right day in May, deterministic N-1 says everything is fine. The LOLE calculation, done properly, says 0.27 days/year — nearly 3x the standard — driven entirely by the joint distribution of load, wind, solar and forced-outage events.
The annual loss-of-load distribution below makes the gap visible: most simulated years see no shortfall at all, but a heavy tail of multi-day high-load / low-wind clusters drags the mean LOLE to 0.27 days/year, well past the 0.1-day NERC standard a deterministic study never sees.
The deterministic N-1 calculation takes peak load, derates renewables to their winter-capacity-factor floor, and assumes the largest single unit is offline. Three independent worst-case assumptions, ANDed together, look conservative. They aren't — they miss the days when load is moderate, wind is below P10, and two mid-sized units have a forced outage at the same time.
8,760 hours × 50,000 simulated years gives 438 million hour-scenarios. For each, available capacity (generation − forced outages − reserves committed) is compared to demand. A loss-of-load event is any hour where available < demand. EUE (Expected Unserved Energy) accumulates the MWh shortfall.
The deterministic study reported a single-number LOLE of 0.04 days/year by handling each stress in isolation. The Monte Carlo result of 0.27 days/year, with EUE of 412 MWh/year, reflects the joint behaviour. The 99th percentile of annual lost-load hours is 96 hours, dominated by 3–5 day high-load / low-wind clusters in late August. Meeting the 0.1 days/year standard demands either ~520 MW additional firm capacity, ~1.2 GWh of additional storage, or a combination — and the trade-off between those two is what the next section answers.
The wind capacity factor in summer peak weeks is the biggest single driver — a 5-percentage-point downward shift moves EUE by 180 MWh/year. Combined-cycle EFOR is second; this is the input that the ISO's reliability committee had been sourcing from a single multi-year average rather than from the GADS distribution. Replacing the point estimate with the distribution moved 28 MWh/year into EUE that had been invisible.
The team evaluated three contingency-response paths against the same simulation:
A 350 MW battery cuts EUE the most per dollar in the body of the distribution but does little in the extreme-cluster tail (the battery is depleted by hour 12 of a 4-day event). A 220 MW peaker cuts the tail cleanly but pays a heavier fixed cost. A demand-response program of 180 MW — economically the cheapest — cuts the body well but has high uncertainty in delivered MW (the DR-yield distribution is Beta(3, 1.5) on declared capacity, with realised yield well below 100% on the days that matter). The portfolio answer, chosen by the planning committee, is 200 MW battery + 120 MW peaker + 90 MW DR — keeping EUE inside the standard at 60% of the single-asset cost.
Reliability is not "we passed N-1." Reliability is a number with a unit (days/year) and a confidence interval. Monte Carlo simulation in ModelRisk is what turns the latter into an auditable quantity the planning committee and the regulator can both defend.